Command Injection #60436
Replies: 1 comment 2 replies
-
|
I don't see the any vulnerability in the code you mention. If you are convinced there is actually a security issue, please do not disclose it publicly and follow the Security Issues procedure. You must property describe the issue by providing a reproducer if possible (like any other bug report). |
Beta Was this translation helpful? Give feedback.
-
|
the issue is that Snyk is flagging a vulnerability, not showing the type- It's just listed as undefended. has anyone seen this king of behavior before? |
Beta Was this translation helpful? Give feedback.
-
|
Please contact that Snyk support then. and the Symfony\Component\Process\Process class is performing sanitization by itself (that's why it takes an array of values, not a shell command line) |
Beta Was this translation helpful? Give feedback.
-
Getting an issue with snyk application where one of the vulnerabilities in file symfony/src/Symfony/Component/Console/Command
/DumpCompletionCommand.php in line no 118.
When can be expected to resolve this issue.
Beta Was this translation helpful? Give feedback.
All reactions